---
title: "Cisco SG (and Catalyst C1300)"
description: "Cisco SG Configuration"
category: "Port-Based NAC"
subcategory: "Port-Based NAC"
last_updated: "2023-02-21"
source_url: "https://docs.xeox.com/port-based-nac/kfxwencCzErupyXTXVc93F/cisco-sg-and-catalyst-c1300/eKodgbTeKF33WPFcjofqPB"
---

# Cisco SG (and Catalyst C1300)

Supported models:

- Cisco SG 300
- Cisco SG 350
- Cisco SG 500
- Cisco Catalyst C1300 (SG Firmware)

## Configuration

You can configure a RADIUS with following command:

```
test-sg300(config)# dot1x system-auth-control
test-sg300(config)# aaa accounting dot1x start-stop group radius
test-sg300(config)# radius-server host 192.168.76.140 key *********.
```

## Without Guest VLAN

Per port configuration:

```
test-sg300(config)# interface gigabitethernet1
test-sg300(config-if)# dot1x host-mode multi-sessions
test-sg300(config-if)# dot1x reauthentication
test-sg300(config-if)# dot1x authentication mac
test-sg300(config-if)# dot1x port-control auto
test-sg300(config-if)# dot1x radius-attributes vlan
test-sg300(config-if)# description PNAC
test-sg300(config-if)# port security mode max-addresses
```

## With Guest VLAN

Global configuration for the guest VLAN. e.g. VLAN 50

```
test-sg300(config)# interface vlan 50
test-sg300(config-if)# dot1x guest-vlan
```

Per port configuration:

```
test-sg300(config)# interface gigabitethernet1
test-sg300(config-if)# dot1x host-mode multi-sessions
test-sg300(config-if)# dot1x guest-vlan enable
test-sg300(config-if)# dot1x reauthentication
test-sg300(config-if)# dot1x authentication mac
test-sg300(config-if)# dot1x port-control auto
test-sg300(config-if)# dot1x radius-attributes vlan
test-sg300(config-if)# description PNAC
test-sg300(config-if)# port security mode max-addresses
```

## Additional recommended Settings for Cisco SG / Catalyst C1300

Disable the macro feature of the SG globally. It's not compatible with dot1x.

```
macro auto disabled
```

Enable SNMP

```
snmp server
snmp location "LOCATION"
snmp community COMMUITY_RO ro
```